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Abstract — We investigate the problem of synthesizing switch¬ 
ing controllers for stabilizing continuous-time plants. First, 
we introduce a class of control Lyapunov functions (CLFs) 
for switched systems along with a switching strategy that 
yields a closed loop system with a guaranteed minimum dwell 
time in each switching mode. However, the challenge lies in 
automatically synthesizing appropriate CLFs. Assuming a given 
fixed form for the CLF with unknown coefficients, we derive 
quantified nonlinear constraints whose feasible solutions (if any) 
correspond to CLFs for the original system. 

However, solving quantified nonlinear constraints pose a 
challenge to most LMI/BMI-based relaxations. Therefore, we 
investigate a general approach called Counter-Example Guided 
Inductive Synthesis (CEGIS), that has been widely used in 
the emerging area of automatic program synthesis. We show 
how a LMI-based relaxation can be formulated within the 
CEGIS framework for synthesizing CLFs. We also evaluate our 
approach on a number of interesting benchmarks, and compare 
the performance of the new approach with our previous work 
that uses off-the-shelf nonlinear constraint solvers instead of the 
LMI relaxation. The results shows synthesizing CLFs by using 
LMI solvers Inside a CEGIS framework can be a computational 
feasible approach to synthesizing CLFs. 

I. Introduction 

The goal of this article is to automatically synthesize 
continuous-time switching controllers for guaranteed asymp¬ 
totic stability of a switched polynomial dynamical system. 
The plant is defined by a continuous-time switched system 
with continuous state variables and finitely many control 
modes. The controller can choose a control mode through 
state-feedback in order to guarantee closed loop stability w.r.t 
a specified equilibrium point. 

The proposed solution is based on adapting Control Lya¬ 
punov Functions (CLFs) to provide a switching strategy that 
guarantees asymptotic stability. A CLF extends a regular 
Lyapunov function to the controlled setting, where it requires 
that for each state, there exists a control that causes an 
instantaneous decrease in the value of the CLF. However, 
CLFs for switched systems can be quite tricky; for a con¬ 
troller to be realizable, the CLF must guarantee that the 
switching signal does not always attempt to change modes 
infinitely often inside a finite time horizon (zenoness). In 
this paper, we first provide a sufficient condition on CLFs, 
along with an associated switching strategy that ensures the 
switching function respects a minimum dwell time for each 
control mode. In other words, we guarantee a minimal time 
T > 0, such that once a control mode is chosen by the 
controller at time t, it remains chosen during the interval 


[t,t + t\. This requirement is essential for the controller to 
be implementable. 

However, the main challenge is to arrive at such CLFs 
in the first place. To do so, we use a template CLF that is 
simply a parametric form of the desired CLF with unknown 
coefficients. We wish to solve for these coefficients to find 
if a CLF with the given template exists. We find that 
this process yields nonlinear feasibility problems that have 
alternating 3 and V quantifiers. This is in direct contrast 
with a standard optimization problems that simply involve 
3 quantifiers. The presence of nonlinear (semi-algebraic) 
constraints is yet another complication. 

To get around the quantification problem, we employ a 
framework called CounterExample Guided Inductive Synthe¬ 
sis (CEGIS) that was originally proposed to “complete” un¬ 
known parameters inside partial programs (termed sketches) 
so that the resulting programs satisfy some correctness 
properties [30]. In this paper, we adapt CEGIS to the prob¬ 
lem of controller synthesis to solve the resulting quantified 
constraints. 

Another challenge lies in dealing with nonlinear (semi- 
algebraic) constraints. Our previous work used off-the-shelf 
nonlinear constraint solvers like dReal [28]. However, the 
resulting procedure is often expensive and fails to complete, 
even for small systems. In this article, we examine a LMI- 
based relaxation for the semi-algebraic constraints. We show 
how the CEGIS-framework can be adapted to use LMI- 
relaxation for synthesizing CLEs. 

We provide an implementation of the CEGIS approach to 
synthesizing CLEs using the SMT solver Z3 constraint-solver 
for linear constraints [9] and the CVXOPT [1] solver for 
LMI constraints. The evaluation suggests our approach can 
synthesize switching controllers for a number of interesting 
benchmarks and can solve larger problems in comparison 
with our previous results. In summary, the contributions of 
this paper are as follows: 

1) We present a sufficient condition on CLEs along with a 
switching strategy which guarantees asymptotic stability 
as well as non-zeno behavior. 

2) We adapt the CEGIS algorithm (used to discover CLEs) 
to use LMI-relaxations, thus significantly improving its 
performance. 

3) We provide a detailed experimental evaluation on a set 
of benchmarks. 


A. Related Work 

“Correct-by-construction” approaches seek hybrid 
(switching) controllers from mathematical plant models, 
wherein the synthesis procedure also guarantees a set of 
user-defined correctness properties for the closed loop. One 
approach to the synthesis first constructs a finite abstraction 
of the system along with a simulation relation between 
the abstract system and the actual system. The simulation 
relation guarantees that a controller that guarantees a 
certain class of properties (eg., safety) on the abstract 
system will also serve to control the original plant model. 
Then the problem is solved for the abstract system using 
discrete automata-based synthesis techniques [22], [19], [3]. 
The problem of zenoness is addressed in some of these 
approaches (eg., [3]) by enforcing a minimum dwell time 
between mode switches. 

The other class of approaches are based on Lyapunov 
functions. Synthesizing Lyapunov functions is a well-studied 
problem for polynomial systems. For instance, the conditions 
on Lyapunov functions have been relaxed using Sum-of- 
Squares (SOS) programming [23]. However, the problem 
for synthesizing a CLF is known to be much harder. For 
control-continuous feedback systems Artstein [2] introduced 
necessary conditions on CLFs, and then showed that a static 
feedback law can be extracted from the CLF once it is 
discovered. However, synthesizing such a CLF is typically 
formulated as a Bilinear Matrix Inequality (BMI) (e.g. [32]). 
CLFs have been studied for switched systems, as well, but 
mainly for switched linear systems. For a survey on these 
results, we refer the reader to Lin et al. [18]. 

The problem of zeno behavior roughly corresponds to 
chattering, that is common in approaches such as sliding 
mode control [17], [8]. However, chattering is dealt with 
in sliding mode control by providing a smooth feedback 
control in a small zone surrounding the sliding surface that 
allows trajectories to approach the sliding mode. It is not 
entirely clear if the formal properties sought in this paper 
are necessarily preserved by such a smoothing step. 

Recently, we proposed a CLF-based approach to controller 
synthesis [28] that guarantees a minimum dwell time prop¬ 
erty for region-stabilization of switched systems using a 
counterexample-guided synthesis approach similar (but not 
identical) to the approach described in this paper. Region 
stability notions first introduced by Podelski and Wagner, 
reason about asymptotic convergence of trajectories to a set 
around the equilibrium rather than the equilibrium itself [27]. 
In this article, we address asymptotic stability. Furthermore, 
our previous work used a nonlinear constraint solver (dReal) 
“out-of-the-box” [12]. Here, we provide substantial perfor¬ 
mance improvements by formulating a LMI relaxation. 

IT Preliminaries 

A. Notations 

Let N, Z, R and IR.+ denote the sets of natural, integer, real 
and non-negative real numbers, respectively. Let ]R[x] be set 
of all polynomials involving variables in x. The 2-norm of a 



Fig. 1. Model of the closed loop system 

vector X is written ||x||. The (full dimensional) ball centered 
around x with radius r is denoted Let x^ is the 

element of vector x and for a subset X C R", let be it’s 
projection onto the variable x^. 

Given a polynomial p € R[x], let Monos(p) be set of 
all monomials in p (monomials with non-zero coefficient). 
Let Deg(p) be the maximum degree of polynomial p, and 
Vars(p) is the set of variables involved in p. For a function 
f : R ^ i?”, f^{x) (f~{x)) denotes its right (resp. left) 
limit at x. Also f'^{x) (f~{x)) represents its right (resp. 
left) derivative at x. 

B. System Model 

The system of interest consists of a plant model and 
a continuous feedback switched controller. The plant has 
a finite number of modes belonging to the set Q, and is 
modeled with n continuous variables. These variables have 
different dynamics, depending on the mode of the plant. The 
controller chooses the mode for the plant, given the current 
continuous state of the plant and it’s current mode. Fig. [T] 
shows a schematic view of the closed loop system. 

Definition 1 (Plant): A plant is a triple A>{X,Q, f) de¬ 
scribing the physical environment; 

1) Ai C R" is domain of continuous variables (n is the 
number of continuous state variables). 

2) Q is a finite set containing (control) modes. 

3) / is a function, that maps each mode q G Q to a 
polynomial vector field fg G R[x]" 

Definition 2 (Controller): Given a plant T'(2f, Q,/), a 
controller is a function switch : Q x X ^ Q that maps 
current continuous state variable x G X and mode q G Q to 
next mode q. 

A trace of such a system is given by functions x(.) : 
R+ —>• X and q{.) : R+ —> Q, which map time to 
continuous state variables and the discrete mode of the plant, 
respectively. 

x(.) is a continuous function defined as 

x(0) = xo , x+(f) = /,(t)(x(f)) 

q{.) is a piecewise constant function with finite or count¬ 
ably infinite set of times SwitchTimes(( 7 ) = {t \ q~{t) 
q^{t)}. A trace (x(.) , q{.)) is time-divergent if for each 
A > 0, the set [0, A] n SwitchTimes(q) is finite. 













C. Problem Statement 


The goal is to find a switch function that guarantees 
asymptotic stability of the resulting closed loop around a 
specified equilibrium x*. Since we are considering poly¬ 
nomial dynamical systems, w.l.o.g we assume x* = 0. In 
addition to the main specification, we also require the closed- 
loop system to maintain a minimum dwell time in each mode, 
as explained earlier. 

Given a connected and compact set PCX, the asymptotic 
stability of the closed loop inside P implies it’s (local) 
Lyapunov stability and the asymptotic convergence of all 
trajectories starting in P to x* [20]. Notice that if x(T) = 0, 
then (Vf > T) x(f) = 0 should also hold. Therefore, we 
assume there is at least one mode qo € Q s.t. /qo(0) = 0. 
Also, it is well known that a given set P may not be 
asymptotically stablizable but a subset P* C P may often 
be stabilizable. 

Problem 1: Given a plant T' and region PCX, find a 
switch function and a region P* C P s.t. the closed loop 
switched system is asymptotically stable w.r.t P*, while all 
the traces are time-divergent. 

III. Controller Synthesis 

Control Lyapunov functions (CLFs) have been used to sta¬ 
bilize systems with control-continuous feedback [2]. Artstein 
first showed once a CLF is obtained, how a corresponding 
feedback law is extracted. First we formally define what is 
a CLF and which class of CLF can be used for switched 
controllers. 

Definition 3: Given a plant T* and a region P C X, a 
control Lyapunov function (CLF) for the plant w.r.t P is a 
positive definite function V : X ^ R+ (C(0) = 0) s.t. 
VxGP\{0} 

C(x) > a(x) A (min ,gQ Vq{x.)) < -aQ(x), (1) 

where a and aq are positive definite functions and Vq = 

(dVsTf 

\dx) J<1- 

Henceforth, we restrict our attention to polynomial CLFs 
C(x) G R[x]. Given a polynomial CLF V and region P, 
we associate region P* to V as P* := P fl {x | C(x) < 
P{P, V)}, where fi(X, F) := minxesx F{^)- 

Also given a CLF V, the associated set of control functions 
switch satisfy 

switch(g,x) G {q I Vq{x) < -aQ(x)} 

In other words, the controller chooses a mode q to enforce the 
decrease of the CLF at all times. However, time-divergence 
is not guaranteed with this class of functions, and therefore 
asymptotic stability cannot be guaranteed. To guarantee time- 
divergent behavior, we can impose a minimal dwell time 
property. A trace satisfies minimum dwell time property for 
a dwell time <5 > 0 iff 

(V fl, ^2 S SwitchTimes(g)) fl ^ ^2 |fi—f2|>^ 

How do we find functions switch s.t. all the resulting closed 
loop behaviors satisfy this property? 


A. Non-Zeno CLF 

In this section, we define a large class of CLFs that can 
be used to synthesize controllers with guaranteed minimum 
dwell time. Before introducing this class of CLFs, we need 
to define another condition. 

Definition 4 (tp-boundedness): Given functions p,(f> : 

X ^ R, p is said to be (/)-bounded iff for every bounded 
region S C X there exists a constant As s.t. (Vx G 
S) p(x) < Asfii-x.). 

Example 1: Consider (p{x, y) : j/^. Any multivariate 

polynomial p{x, y) whose lowest degree terms have degree 
at least 2 is (()-bounded. Examples include x^ -f 2x^ -I- ‘Sxy, 
xy, and — 3i/^. On the other hand, the function p{x, y) = 
x-\-y is not ^-bounded since no bound of the form p{x, y) < 
Fy^) when S is taken to be a region containing (0,0). 
Similarly, the function 3 -f x is not ^-bounded. 

Definition 5 (Non-Zeno CLF): A CLF is said to be non- 
zeno iff there exist constants e, > 0 and positive (definite) 
functions fig : X ^ R s.t. 

Vq(x) is (/)q-bounded, (2) 

(^q(x) is -bounded, and (3) 

(Vx G P \ {0}) (BqCQ) Vqpx.) < -eqfiqix), (4) 

where Eg(x) = fq{^) and ^(x) = {^^)^fq{x). 

Informally, the goal is to make sure not only Vq is negative 
definite, but also is smaller than a class of negative (definite) 
functions. Now we explain how such property helps to 
guarantee min-dwell time property. 

Assume there exists a non-zeno CLF V and let a class of 
functions switch associated to V be defined as 


switch(g, x) 


/ Lj (x) > p A X G P \ 

V A Vq{K) < -eqfiqix) ) 


q otherwise 


wherein ry := for a chosen scale constant A > 1. 

In other words, rather than switch when the CLF Vq (x) = 0, 
we force the system to switch when Eg(x) > p. We also 
force the system to switch to a mode q for which Vq{x.) < 
—eq(j)q{x.). The definition of a non-zeno CLF guarantees that 
such a mode q will exist. 

•• • 

The key observation here is that the constraints on Vq, Vq, 
fiq altogether guarantee that when the controller switches 
at time fi, the controller need not switch again in interval 
[fi,fi -f for some fixed (5 > 0 (i.e. Vq{x.{t)) < rj for all 
f G [fl, fl -I-). A bound for <5 is given directly in the proof 
of the following proposition. 

Theorem 1: Given regions P, a plant 4/ and a non-zeno 
CLF E(x), let P* be the associated region for V w.r.t 
P. Given x(0) G P*, a switching function that admit the 
description of Equation (|5]l results in a system which satisfies 
the following properties. 

1) all the traces of the system are time-divergent 




2) P* is a positive invariant. 

3) system is asymptotically stable w.r.t P* 

A proof is provided in the Appendix. 

B. Implementation 

Once a non-zeno CLF is found, the controller can be 
implemented in many ways. We can implement an oper¬ 
ational amplifier circuit that selects the appropriate mode 
by computing (/)(x) and Vq{'x) from the state feedback x. 
Such a circuit will not need to know the minimum dwell 
time: however, the minimum dwell time provides us with a 
guideline on the maximum delay permissible. 

Another approach is to find an under-approximation of 
min-dwell time 5_ and use a discrete time controller that 
change the modes every 5 time units. Yet another software- 
based solution is to use a model predictive control scheme: 
the controller switches to a mode q at time ts given x(fs) 
{Vq{x{ts)) < —eq(j)q{'K{ts))). Also, the controller predicts 
the first time instance tf > ts s.t. Vq{x{tf)) > _. 
Then the controller sets a wake up timer for time t = tf and 
re-evaluates at that point. The minimum dwell time provides 
a design guideline to the scheduler on the shortest possible 
wake up time tf. 

IV. Discovering Control Lyapunov Functions 

Thus far, the problem of controller synthesis has been 
reduced to problem of finding a non-zeno CLF. First, a 
template polynomial is chosen for function V. More pre¬ 
cisely V(c,x) = ''Tii(x) is a polynomial with 

fixed monomials mi{x.) and unknown coefficients c G i?"*. 
Second, appropriate values for eg and cf)q (for all q G Q) 
are chosen. In particular, finding positive (definite) functions 
(j)q S.t. Equations dU and Q hold is not straightforward. We 
consider a simple class of positive (definite) functions of the 
form (/)q(x) = X]r=i where di^q G N. Then, we use 

the following theorem to find proper values for di^q s.t. ^q 
and Vq are ^^-bounded. 

Theorem 2: Given a function ^(x) = X]r=i ^ 

function p : X ^ R p is (^-bounded if 

(Vm G Monos(p)) (Vr) 2di < Deg(m). (6) 

A proof is provided in the Appendix. By this theorem, one 
can find all possible functions (jig s.t. Equations (l2]l and Q 
hold, because the process of finding these functions depends 
only on the possible monomial terms in V, and not on their 
coefficients. 

Example 2 (Choosing ipq for a System): Consider a 
switched system with three continuous variables x, y and z 
and two modes qi and q2 with dynamics: 

{ x = -y {x = y'^ 

y = z q 2 ly = -x^ - y^ 

z = 1 [z = -z 

Assuming V{[xy z]'^) = Cix‘^+C2y‘^+C3z‘^, Vq^ ([a; y z]"^) = 
2 ci(y^ - xz) + 2 c2{z‘^ + u) + 2c3 and fq^llx y z]^) = 
y'^ + x^ -\- z^ satisfies both Equations ^ and © and it is a 


proper ipg^^. Eor mode q 2 , one can choose many fq^ functions 
as well. Eor example (j)q 2 {[x y z]'^) = x'^ + y'^ -\- z^ is ?i 
possible solution. 

In addition to tq and fq, we fix a positive definite function 
a(x). Eurthermore, we assume c belongs to a bounded set 
Co C i?™ (Often Co : [—1,1]™). Now, the problem is to find 
unknown coefficients c s.t. V is a non-zeno CLE. In other 
words, we want to solve problem below 

(3c GCo) (VxGP\{0}) 

V(x)>a(x)A \ 

{3 qGQ) Vq{K) < -Cqfqix.) j 

Note that, if the formula above is feasible (satisfiable), then 
the existential quantifier (3c G Co) yields us a solution c 
that can be used to instantiate the CLE. Eirst, we use an 
LMI-based relaxation of the relevant polynomial problems. 
This is done following the standard approach [15], [24]. 
Briefly, let m represent a m x 1 vector of monomials. A 
polynomial p(x) can be written as {Q, mm‘) where Q is 
a symmetric m x m matrix and {A, B) denotes tr(A x B). 
Next, we relax mm* by a matrix Z PQ where rank(Z’) = 1. 
The constraint x G P is rewritten as the constraint Z G P. 
Typically, P is given as a interval constraint. Therefore P is 
itself an interval over matrices that represent the lower and 
upper bounds of each monomial in mm*. Einally, the rank 
constraint is thrown out, and often replaced by a “low-rank 
promoting” constraint or objective. 

Therefore, the constraints in 0 are rewritten to yield a 
(mixed linear + LMI cone) constraint of the following form: 

(3c G C'o)(VZ)(Z >r 0 A Z G P A (G, Z) > 0)) ^ 

(P(c) - G, Z) > 0 A \ (8) 

(3 qGQ) (P,(c)-Gq,Z) >0 J 

Here, (G, Z) ({Gq,Z)) is the relaxed version of a(x) 
(aQ(x)) and P(c) = represents a matrix whose 

entries are linear in c, and similarly for Fq{c). As such the 
form above is not easy to solve using existing methods: the 
constraints are bilinear and contain disjunctions. To solve 
this 3 V formula we employ CEGIS framework [28]. 
Overview of the CEGIS framework: At a high level, 
CEGIS focuses on formulae of the form 

(3 X G A) (V y G P) V'(x,y). 

The algorithm is iterative and at any iteration maintains a 
finite set of witnesses Bs^if = {bi,..., b;}. 

Initially P{o} N a some finite subset consisting of samples 
from the set B. At each iteration, we consider the following 
two steps: 

1) Choose a candidate by solving the problem: 

a{i} := find x G A s.t. ^ ?/;(x,bj). (9) 

Note that the inner V quantifier is replaced by a finite 
conjunction and we have y variables in -0 instantiated. 
If the problem is feasible and aj^j G A is obtained, we 



move to the next step in the iteration. Otherwise, we 
declare failure of the overall procedure. 

2) Next, check the candidate by checking the formula: 
(V y S y), or equivalently if its negation is 

feasible: 

find y s.t.-.?/;(a{i},y). (10) 

If the formula above is infeasible, then we have found 
the required answer a^jj for the original problem. 
Otherwise, we find a such that -i'0(a{j}, 

succeeds. We now set := U {b{j_|_i}}. 

Note that adding b{j_|_i} G ensures that a^jj is never 

chosen again in any future iteration. It can also eliminate all 
other previously unexamined values of a € that also fail 

'0(a,b{i+i}). 

Applying CEGIS Procedure Given the disjunctive formula 
from Eq. ([8]l, which will be written as 

(3 c e Co) (V Z)(Z tOAZe Pa{G, Z)>0) Z) 

The CEGIS procedure works with a set := 

..., wherein each Z G satisfies the 

constraints Z 0, Z G P and (G, Z) > 0. 

1) Eind a value G Cg that satisfies: 

C{i} := find c s.t. T'(c, Z{i}) A 1'(c,Z{k,})- 

Plugging in Z = ..., yields a system of 

disjunctive linear constraints over c. While solving 
constraints is NP-hard, recent progress in SAT modulo- 
theory (SMT) solvers has yielded efficient implemen¬ 
tations such as Z3 can handle quite large instances of 
disjunctive linear constraints [9]. 

2) If C{j} is found, we next check the feasibility of C{j} by 
successively solving, separately, a series of mixed cone 
constraints: 

(1) {F{c,) -G,Z)< 0, (G, Z) > 0, Z gP, ZAO 

(o\ A,eQ -ffCQ,Z) < 0 

^ ’ {G,Z)>0,ZgP, ZFO 

With c = the bilinearity is now avoided. If 

any of these constraints are feasible, we obtain a new 
witness Z{j_|_i} that is added to Otherwise, 

the constraints are infeasible and we have found our 
required c* = 

The process is iterated until we find parameters c = c* or 
fail to find a candidate. 

A. Extension to Control-Ajfine Systems 

The CEGIS framework as mentioned can be used to 
find non-zeno CEE for switched systems. However, it is 
not restricted to this class of CLEs. In this section, we 
discuss how such framework can be used to discover CEE for 
control-affine systems as well. Assume we have a nonlinear 
control-affine dynamical system as below 

x = /(x) -f p(x)u, 

where /(x) : i?[x]" is a homogeneous polynomial vector 
(/(O) = 0) , u : RP is the input vector. Also u G U and 


U (3 0) is a closed bounded polyhedra. p(x) : is 

a polynomial matrix. Erom definition of CEE [2], we know 
that V (V(0) = 0) is a CEE if 

(VxeP\{0}) 

C(x) > a(x) 
minl/(x, u) < —Q!q(x) 

uGU 

Let U'’ be set of vertices of polyhedron U. Each u* G U 
can be written as a convex combination of elements of If". 
Also, because of linearity of u in l^(x, u), if C(x, u*) < 
—aQ(x) for some u* G U: 

(3A) Au > 0 A ^ Au = 1 A u* = ^ AuU 

u6f7" u6f7" 

^ A(x, ( AuU j) < -agix) 

Vuea- / 

Y •^uA(x,u) < -aQ(x) 

uet/- 

(3u G B") V(x,u) < -aQ(x) 

One can define a switched system with modes Q = {gu|u G 
U"} and dynamics for each mode Qu as fq^ = /(x)-|-p(x)u 
and claim that V (F(0) = 0) is a CLE iff 

(VxGP\{0}) 

V(x) > a(x) 

(3qeQ) Aj(x) = A(x,u,) < -agix) 

Then, CEGIS framework can be employed to find a CLE to 
solve this problem, given a and ag. Once a CLE is found, 
we can also synthesize the appropriate controller as discussed 
in Section UlI-BI or known methods from control theory [31] 
can be applied to find a feedback law. 

V. Evaluation 

In this section, we demonstrate the effectiveness of the 
LMI-based CEGIS framework on some benchmark nonlinear 
problems. Our implementation consists of a python script 
which interacts with two other parts: (a) The Z3 SMT solver 
used for finding CLE candidates by solving linear arithmetic 
formulae over the reals [9], and (b) The CVXOPT [1] solver 
which is used to solve mixed cone constraints. While Z3 is 
an “exact arithmetic” solver, CVXOPT relies on numerical 
calculations that are susceptible to error. 

The inputs for our implementation are: (i) continuous 
variables, (ii) ODEs for each control mode, (iii) region P 
(assumed to be a box), (iv) a template for the CLE and 
(v) Cq for each mode. The vertices of region P are used as 
initial witness points Xg, and we also fixed a(x) = 
and chose ^i'q(x) = YPi=i Pf modes in all problems. 

We use a generic quadratic form for the CLE (i.e. all the 
monomials with degree 2), unless otherwise mentioned. 

We collected a set of 21 benchmarks to evaluate the pro¬ 
posed approach. The instances of these benchmarks are taken 
from the literature including control-affine feedback systems 




TABLE I 

Results of running our implementation on the switched systems benchmark suite 


Problem 

Previous Results 

New Results 

ID 

n 

a 

Spec 

itr 

z3 T 

SMT T 

Tot. T 

Stat 

itr 

z3 T 

SDP T 

Tot. T 

Stat 

1 

2 

0.01 ||x|F 

AS 

1 

0.0 

0.8 

0.8 

✓ 

18 

3.9 

1.7 

5.9 

/ 

2 

2 

0.01 

RS 

3 

0.0 

3.4 

3.6 

✓ 

30 

0.5 

2.0 

2.8 

X 

3 

2 

0.0001 

RS 

6 

0.1 

1.6 

2.0 

✓ 

10 

0.1 

0.8 

1.0 

/ 

4 

2 

0.1 

RS 

6 

0.1 

3.6 

4.0 

✓ 

12 

0.2 

1.5 

2.1 

/ 

5 

3 

0.1 IMF 

AS 

13 

2.2 

352 

355.2 

✓ 

4 

0.1 

0.7 

1.3 

/ 

6 

3 

0.1 IMF 

AS 

TO 

X 

1 

0.0 

0.2 

0.7 

/ 

7 

3 

0.05 

RS 

8 

4.4 

80.8 

86.2 

✓ 

1 

0.0 

0.3 

0.7 

/ 

8 

3 

1.0 

RS 

36 

48.1 

57.3 

108.4 

✓ 

13 

0.4 

1.7 

2.5 

/ 

9 

3 

0.001 

RS 

1 

0.0 

2.1 

2.2 

✓ 

1 

0.0 

0.1 

0.5 

/ 

10 

4 

0.001 

RS 

TO 

X 

1 

0.0 

0.4 

2.0 

/ 

11 

4 

0.001 

RS 

1 

0.0 

14.9 

14.9 

✓ 

1 

0.0 

0.3 

1.5 

/ 

12 

5 

0.001 

RS 

1 

0.0 

596.5 

596.5 

✓ 

1 

0.0 

0.3 

3.7 

/ 

13 

6 

0.001 

RS 

2 

0.5 

2994.0 

2995.6 

✓ 

1 

0.4 

0.5 

9.2 

/ 

14 

9 

0.001 

RS 

TO 

X 

2 

0.0 

0.3 

202.3 

/ 


Legend: n\ # state variables, , AS: Asymptotic Stability, RS: Region Stability, itr : # iterations. Tot. T: total computation time, Z3 T: time taken by Z3, 
SMT T: time taken by the SMT solver for finding counter-examples , SDP T: time taken by CVXOPT, , TO: timed out, NA: not applicable, Z: Success, 

Jt: Failed. All timings are in seconds. 


TABLE II 

Results of running our implementation on the control-affine 
SYSTEMS benchmark SUITE 


Problem 

Results 

ID 

n 

<^9 

itr 

z3 T 

SDP T 

Tot. T 

Stat 

15 

2 

0.1 

34 

2.7 

2.3 

5.2 

/ 

16 

2 

0.0 

1 

0.0 

0.1 

0.3 

✓ 

17 

2 

0.05 

38 

1.7 

4.1 

6.2 

/ 

18 

2 

0.0 

20 

0.4 

1.9 

2.6 

/ 

19 

3 

1.0 

1 

0.0 

1.0 

3.0 

/ 

20* 

4 

0.0 

46 

164.4 

30.3 

202.2 

✓ 

21 

6 

0.0 

TO 

X 


* After failure with a quadratic template, a template with 9 monomial 
selected carefully according to the dynamics (V{x,y,z,w) = 
cix^ + C2y^ C32^ -b C4U)^ -b c^yz -b cgxz + c^xz^ + csz'^ -b C92®) 


and switched systems. A description of the benchmark is 
available in Appendix □ 

In hrst phase of the evaluation, we considered a set of 
switched system problems with multiple control modes. For 
some of these problems, the origin is not an equilibrium for 
any of the modes; therefore, stabilization is not possible with 
hnite dwell time. Therefore, we considered the problem of 
stabilizing to a small neighborhood of the origin. To do so, 
the CLF conditions are relaxed to eliminate the small region 
around the equilibrium [28]. The rest of our framework 
applies directly. The results are shown in Table |I] 

Next, we considered a set of problems with control-affine 
feedback systems. For these systems we solve the problem 
by hnding a CLF (not necessarily non-zeno) and for all the 
problems we chose q:q(x) = CLF does not 

exists, then we try to hnd a CLF with e, = 0. The results 
are shown in Table im 

In summary, from the given 14 problem instances in 
Table H we hnd that the LMI relaxation introduced here, 
fails to solve one problem instance due to the LMI relaxation. 


One solution to address the loss in precision is to decompose 
the state space for getting more precise abstraction of the 
state space. On the other hand, the proposed technique can 
solve three previously unsolved instances that are among the 
larger ones in our benchmarks. The timings for our LMI- 
based approach are nearly an order of magnitude faster than 
our earlier approach, especially for larger examples. 

As results suggest, the problem of hnding a CLF can 
be solved in few iterations. Finding witnesses using LMI- 
relaxation are signihcantly faster compared to the previous 
approach using non-linear solvers (Z3 or dReal [12]). As 
currently, problems with as many as 9 variables are solvable. 
However, the framework fails to terminate for the problem 
with 6 variables, due to high complexity of hnding a CLF 
candidate. The problem of hnding a CLF candidate using 
linear real arithmetic is the bottleneck of the computations 
in our new framework, whereas the nonlinear solver is the 
bottleneck for the older framework. The size of the related 
problem depends on the size of the template and the number 
of witness points. Therefore, one challenging problem is to 
carefully choose a small template (as in System 21) in order 
to manage the complexity of these problems. 

VI. Conclusion 

In this work we introduced a class of CLFs, namely non- 
zeno CLFs which guarantee the existence of a switching 
strategy for asymptotic stability of switched system. We 
also proposed a LMI-based CEGIS framework for hnding 
CLFs for switched systems as well as control-affine sys¬ 
tems and we evaluated the proposed approach on a set of 
benchmark from the literature. The main shortcoming of 
this framework comes from hardness of solving formulae in 
linear arithmetics and as SMT solvers improve, we hope this 
approach can solve bigger problems. Going forward, we are 
investigating extension of this framework for hnding control 
barrier certihcates to solve safety problems. 
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Appendix 

Proof of Theorem [I] Given regions P, a plant T' and a 
non-zeno CLF U(x), let P* be the associated region for V 
w.r.t P. Given x(0) £ P*, a switching function that admit 
the description of Equation Q results in a system which 
satisfies the following properties. 

1) P* is a positive invariant. 

2) all the traces of the system are time-divergent 

3) system is asymptotically stable w.r.t P* 

Proof: We first prove that P* is a positive invariant. 
Recall that P is a compact set containing 0 and let dP denote 
it’s boundary. Also, recall that /3(P, U) := minxeap ^(x). 
Consider a class of switch functions defined below. 

( Vq{^) > \ 

^ \ Vq{^) < -eqfqi-X.) A X S P J 

q otherwise 

We note that switch (q, x) is defined over all x G P and q £ 
Q by construction of the CLF V. Assume x(0) £ P* and q £ 
Q such that Ug(x(0)) < —eq(j)q{x.). We obtain U(x(0)) < 
li{P,V). Also, the switch function ensures that as long as 
x(f) G P, U,(t)(x(t)) < < 0. Therefore 

U(x(4)) = U(x(0)) + [ V,(t)(x(t)) dt < U(x(0)) 

Jo 

Since U(x(0)) < (3{P,V), we have U(x(<)) < fi{P,V). 
Therefore, by definition x(t) G P*. 

Next, we show there exists a min dwell time between two 
switching times. Assume there is a switch time ti s.t. x(ti) G 


switch((7,x) := 




P* and mode switches to q. Thus, 


( 11 ) 

Let t 2 be the next time instance when the controller switches 
to mode q. By definition of the controller we can conclude 

Cy.,,-)) = ,12) 

It is sufficient to show S = t 2 — ti has a lower bound and it 
can not be arbitrarily small. 

From Equation (|2|i and Q and boundedness of P there 
are constants Ai and A 2 s.t. for all x S P 

< Al(/lq(x) (13) 

<^9(x) < A2(/lq(x) (14) 

From Equation (fT4l i. we get 

(Vf e [ti,t2]) 

(j)q{x{t)) = + [ ^q{x{T))dT 

Jti 

< + [ A2<?iq(x(r))dr 


and therefore 

</> 9 (x(f)) < cj)q{x{tl)) 

A lower bound on Vqix{t 2 )) by Equation 


)) = -- 


A 


Equation GH > e^"‘^eg(^g(x(ti)) 

A 


(15) 


(16) 


Also 


(Vf e (fi,f2)) 

Vq{x{t)) = Vq{x{t+))+ [ Vq{x{T))dT 
Jtl 

® < I4(x(t,)) + A, f M^(r))dr 

Jtl 

Equa^ tm ^ ^ e^^^M^{h))dr 

Jtl 


and therefore an upper bound on Vq{'x.{t 2 )) is 

Vq{x{t 2 )) < Vq{x{tl)) + (x(f 1 ) )5 

Equa^ (TT} ^ 4>q{x{tl))S (17) 

From Equations (fTbl l. (fTTl i 

-tAiiALM < fi(xfe)) 

A 

< -€q(l)q{x{tl)) + Aie^'^^Cj)q{x{tl))d 


and finally assuming x(fi) ^ 0, we have ^(x(fi)) > 0: 


pA25, 


< 


e, < 


-tq + Aie^'^^5 


(A - 6^2^) 


h{ 5 ) 


( 18 ) 


Notice that 

1) 0 < < A h{5) > 0. Since A is a chosen 

parameter, it can always be chosen sufficiently large to 
ensure this inequality. 

2) fi is a monotone function of 6 in domain 0 < < A 

by showing that ^ is positive. 

3) h{0) = 0 and lim log(A) h{6) = +oo. 

A2 

h~^ : R'*' ^ R'*' is defined and h~^{eq) < 6. Therefore, 
h~^{eq) is a lower bound on S, and all traces of the system 
are time-divergent. 

In the next step of the proof, we want to show the system 
is asymptotically stable. Since P* is a compact set, (Vf > 
0) x(t) G P* and time diverges, by Bolzano-Weierstrass 
Theorem [4], x(t) converges to some x* G P*. Assume 
X* 0 and therefore mmq{eq(j)q{x*)) = i? > 0. By 
continuity of (j>q and divergence of time, one can find e > 0 
s.t. 


{3T > 0) (Vf > T) x{t) G B,{x*) C P* 

(Vg G Q) (Vx G B^{x*)) eq4>q{x) > ^ 

Also V is bounded in Bc{x*) and decreases through time. 
Eormally, 

(V< > T) Vq^){x{t)) < < _^ 

As a result 

/•T -\-t ^ 

V{x{T At)) = V{x{T)) + L,(^)(x(r))dr 

< v'(x(r)) - At 

which means eventually V becomes negative as time goes 
to infinity and that is a contradiction. Therefore x* = 0 and 
the system is asymptotically stable. ■ 

Proof of Theorem |2] Given a function (/)(x) = 
and a function p : X ^ R p is (^-bounded if 

(Vm G Monos(p)) (Vi) 2di < Deg(m). 

Proof: Assume Equation ® holds and 5" is a bounded 
region. We want to show there exists a A s.t. (Vx G 
S) p{x) < A(j){x). 

Eor a monomial m G Monos(p) and i s.t. x^ G Vars(m), 
let R{i,Tn) be the following region 

R{i,m) = {x G [-l,l]"|(Vg Xj G Vars(TO)) |xi| > |xj|} 

Notice that [—1,1]" = IJ^ R{i, m). Also 

(Vx G R{i,m)) m(x) < < x^* < (j){x) 

and therefore 


(Vm G Monos(p)) (Vx G [—1,1]") m(x) < (j){x) 










Since S is bounded, there is a constant Aq s.t. S C 
[-Ao,Ao]". Then 

(Vto g Monos(p)) (Vx G [—Aq, Aq]") m(x) < Aq®®^^^(/)(x) 

Now let p(x) = Ci TOi(x) where mi(x) G Monos(p) 
and Ci is its coefficient in p. Therefore Vx G S' 

p(x) = TOi(x) 

i 

<^|c,|A“«<”V(x) 

= Ao"^^(™)(^|c,|)<^(x) 
i 

Thus there exists a A = |ci|) s.t. 

(Vx G S) p(x) < A^(x) 


'/ ^ / X k . 

ui = — ~j^ 

• k, , s R 1 
z = -yito + 20) —-i + —u 

Lj Lj Lj 

Region of interest P = {[w i]^|a; G [—10 10],i G 

[—10 10]}. Target region R — 695 ( 0 ) and initial region 
I = 64 ( 0 ). 

System 3: This system is a DCDC boost converter adopted 
from [7] with two discrete mode (qi, 52 ), two continuous 
variables i and v. By a simple change of bases the state 
i = 1.35 and v = 5.65 is set as desired point of activity 
(origin) and the following dynamics are obtained. 


Benchmark Description for Switched System: This 

benchmark contains 14 systems adopted from literature. For 
each system the continuous variables and dynamics for each 
modes is defined as well as the region of interest P. For some 
systems we consider region-stability instead of asymptotic 
stability. In these cases a target region R is also provided 
and it is guaranteed system reaches R and stays there forever 
(See [28] for more details). 

System 1: This system is a switched system adopted from 
[13]. There are two continuous variables x and y and 5 modes 
(qi,q^) the dynamics of each mode is described below 


71 

72 

73 



X 



0.0403X + 0.5689y 
0.6771a; - 0.2556?/ 

0.2617a; - 0.2747y 
1.2134a;-0.1331?/ 

1.4725a;- 1.2173y 
0.0557a; - 0.0412?/ 


7i 


0.0167?-b 0.3558 
-0.0142?; - 0.08023 


72 


i = -0.0183? - 0.0663?; - 0.0660 
V = 0.0711 * i - 0.0142 * ?; -b 0.0158 


Region of interest is P = {[? ?;]^|? G [—0.7 0.45],?; G 
[—0.7 0.7]}. Target region R = 69 , 04 ( 0 ) and initial region 

I = 60 . 3 ( 0 ). 

We are considering region stability with target region R = 
^ 0 . 04 ( 0 ). 

System 4: This system is adapted from [22]. There are 
two continuous variables xi and X 2 and the controller can 
choose between three different modes (qi, ( 72 ). By setting 
a;i = —0.75 and X 2 = 1.75 as the origin, the new dynamics 
for these modes are 


74 


X = -0.5217a;-b 0.8701?/ 
y = -1.4320a;-b 0.8075?/ 


75 


X = -2.1707a;- 1.0106?/ 
y = -0.0592a;-b 0.6145?/ 


The region P is [—1 1]^. 

System 2: This system is adopted from [19] is a DC 
motor system. There are two continuous variables oj and ?, 
and input u is the source voltage. 


xi = —X 2 — 1.5a;i — 0.5a;f 

X2 = Xl — X 2 + 2 

xi = —X 2 — 1.5a;i — 0.5a;f 
X 2 = Xl — X 2 

xi = —X 2 — 1.5a;i — 0.5a;f + 2 




B k 

. k K 1 

? = ——w —-i + —u 

Lj Lj Lj 

, where B = 10-^, J = 25 x 10-^ k = 0.05, R = 0.5, 
L = 15 X 10“"^ and u G { — 1,1}. The desired point is [w i] = 
[20 0 ] and by change of basis, we get the following system 


Region P is defined as P = {[a;i a; 2 ]^la;i G 

[—2.25 2.75],?; G [—3.25 3.25]}. Notice that this region 
is a little different from the one introduced in [22]. Target 
region R = 69 , 25 ( 0 ) and initial region / = 61 (0). 

System 5: The system is a linear switched system, adapted 
from [26]. There are three continuous variables x, y, z in this 



system and the dynamics for 3 modes (qi, and q^) are 

{ X = 1.8631X - 0.0053?/ + 0.9129z 
y = 0.2681a; - 6.4962?/ + 0.0370z 
I = 2.2497a; - 6.7180?/ + 1.6428z 

{ X = -2.4311a; - 5.1032?/ + 0.4565z 
y = -0.0869a; + 0.0869?/ + 0.0185z 
I = 0.0369a; - 5.9869y + 0.8214z 

{ X = 0.0372a; - 0.0821?/ - 2.7388z 
y = 0.1941a; + 0.2904?/ - O.lllOz 
I = -1.0360a; + 3.0486?/ - 4.9284^ 

Region P = [—1 1]^. 

System 6: This system is a switched system adopted from 
[13]. There are three continuous variables x, y, z and 5 
modes (qi,...,q^) the dynamics of each mode is described 
below 

{ X = 0.1764a; + 0.8192?/ - 0.3179z 
y = -1.8379X - 0.2346?/ - 0.7963z 
I = -1.5023a; - 1.6316?/ + 0.6908z 

{ X = -0.0420a; - 1.0286?/ + 0.6892z 
y = 0.3240a; + 0.0994?/ + 1.8833z 
I = 0.5065a; - 0.1164?/ + 0.3254z 

{ X = -0.0952a; - 1.7313?/ + 0.3868z 
y = 0.0312a; + 0.4788?/ + 0.0540z 
I = -0.6138a; - 0.4478?/ - 0.4861z 

{ X = 0.2445a; + 0.1338?/ + 1.1991z 
y = 0.7183a; - 1.0062?/ - 2.5773z 
I = 0.1535a; + 1.3065?/ - 2.0863z 

{ X = -1.4132a; - 1.4928?/ - 0.3459z 
{l = -0.5918a; - 0.0867?/ + 0.9863z 
I = 0.5189a; - 0.0126?/ + 0.6433z 

Region P = [-3 3]^. 

System 7: This system with 3 continuous variables and 4 
modes is adopted from [5]. The dynamics are 

{ a; = 4.15a;- 1.06?/-6.7z+ 1 
y = 5.74a; + 4.78?/ - 4.682 - 4 
I = 26.38a; - 6.38?/ - 8.292 + 1 

{ X = —3.2a; — 7.6?/ — 22 + 4 
y = 0.9a; + 1.2?/ — 2 — 2 
2 = a; + 6 ?/ + 52 — 1 

{ i = 5.75a; - 16.48?/ - 2.412 - 2 
y = 9.51a; - 9.49?/ + 19.552 + 1 
2 = 16.19a; + 4.64?/ + 14.052 - 1 

{ X = -12.38a; + 18.42?/ + 0.542 - 1 
y = —11.9a; + 3.24?/ — 16.322 + 2 
2 = -26.5a; - 8.64?/ - I 6.62 + 1 


Region of interest is P = [—1 1]^. Target region P = 

Po.i(O) and initial region / = Po. 5 ( 0 )- 

System 8 : This system is a radiant system in building 
adopted from [ 22 ] which is a switched linear system with 
three continuous variables (Tc, Ti and T 2 ) and two modes 
Q 2 )- By setting Tc = 24 and T? = T 2 = 23 as the new 
origin, the dynamics obtained are 


{ fc = 2.25Ti + 2.25T2 - 9.26rc - 14.54 
Ti = 2.85T2 - 7.13ri + 4.04Tc + 4.04 
Tz = 2.85Ti - 7.13r2 + 4.04Tc + 4.04 

{ fc = 2.25Ti + 2.25T2 - TSTc + 4.5 
Ti = 2.85T2 - 7.13ri + 4.04Tc + 4.04 
Tz = 2.85Ti - 7.13r2 + 4.04Tc + 4.04 


Region P = [—6 6 ]^ and target region R = yBi(O) and 

initial region I = ^ 3 ( 0 ). 

System 9: The system is a heater for keeping several 
rooms warm [21]. There are 3 rooms ti, t 2 and and heater 
can be in one of these room or it can be off. Therefore, there 
are four modes (qo ,..., ( 73 ) with the following dynamics. The 
goal is to keep ti around 21 (? € { 1 , 2 ,3}). 


(100 ii = -10.5(ti + 21) + 5(t2 + 21) + 5(^3 + 21) + 5 
qo < 100 f = 5(p + 21) - 10.5(t2 + 21) + 5(^3 + 21) + 5 

[ 100 to = 5{ti + 21) + 5(t2 + 21) - 10.5(f3 + 21) + 5 

( 100 ti = -11.5(ti + 21) + 5(f2 + 21) + 5(^3 + 21) + 55 
qi i 100 f 2 = 5{ti + 21) - 10.5(^2 + 21) + 5(^3 + 21) + 5 

[ 100 ii = 5(p + 21) + 5{t2 + 21) - 10.5(f3 + 21) + 5 

f 100 A = -10.5(ti + 21) + 5(f2 + 21) + 5(^3 + 21) + 5 
<J2 < 100 A = 5{ti + 21) - 11.5(^2 + 21) + 5(^3 + 21) + 55 

[ 100 ii = 5(p + 21) + 5(f2 + 21) - 10.5(t3 + 21) + 5 

( 100 ii = -10.5(ti + 21) + 5(f2 + 21) + 5{ti + 21) + 5 
qi ^ 100 A = 5(P + 21) - 10.5(^2 + 21) + 5(^3 + 21) + 5 

1 100 A = 5{ti + 21) + 5{t2 + 21) - 11.5(f3 + 21) + 55 


Region P = [—5 5]^. Target region R = Bi{0) and initial 
region I = 82 . 5 ( 0 )■ 

System 10: The original system is a switched control 
system with inputs from [34]. There are 4 variables (w, x ,y 
and z) and 4 original modes. After converting the discrete 
system into a continuous one, the dynamics are 



<11 


(?2 < 


<73 


(74 < 


= -0.693U) - 1.0992; + 2.197i/ + 3.2962 - 7.820'u 
= -1.7922; + 2.1971/ + 4.3942 - 8.735u 
= -1.0972; + 1.5041/ + 2.1972 - 2.746u 
= 0.4062 + 3.244 m 

= -1.792m; - 1.0992; + 2.197i/ + 1.0992 + 6.696 m 
= 0.4062;-2.197y +4.734 m 
= -0.6931/ + 2.773m 

= -2.197m; - 1.0992; + 2.197i/ + 1.5042 + 4.263 m 
= 0.406m; + 0.811m 

= 1.099m; - 0.1442; + 0.549i/ - 0.5492 + 1.910 m 
= 0.5492; - 0.1441/ - 0.5492 + 3.871m 
= 1.099m; — 0.6932 + 4.970m 

= —0.693m; + 2 .OOO 2 ; + 1.863m 
= -0.6932; + 4. 159m 
= -0.6931/ + 2.773m 
= 4 .OOO 2 ; — 4.000t/ — 0.6932 — 1.069 m 


, where u G {—1, 1} and Region of interest is P = [—1, 1]^. 
Target region R = Po.i(O) and initial region I = So.i(O)- 

System 11: The system is similar to System |9l except that 
the number of rooms is 4 and P = [—5 5]"^. See [21]. 

System 12: The system is similar to System |9l except that 
the number of rooms is 5 and P = [—5 5]®. See [21]. 

System 13: This system is 6 variables version of System|9] 
and there are 6 rooms and 2 heaters and we only consider 4 
modes. The heater is off for one mode (qo) and for mode qi 
(1 < i < 3), two heaters are on in rooms i and 3 + i. Region 
p = [-5 5]®. 

System 14: This system is 9 variables version of System|9] 
and there are 9 rooms and 3 heaters and we only consider 4 
modes. The heater is off for one mode (qo) and for mode qi 
(I < / < 3), three heaters are on in rooms i, 3 + / and 6 + z. 
Region P = [-5 5]®. 


Benchmark Description for Control Affine System: The 

benchmark used in the experiments are examples adopted 
from literature describing control-affine systems. The con¬ 
tinuous variables is provided for each case as well as system 
dynamics and region of interest P. Also possible values for 
input u is described. 

System 15: This system is adopted from [16]. There are 
two continuous variables x and y and the dynamics are 


x = y 

y = —X -\- u 


, where u G [—1,1]. Region of interest is P = [—5 5]^. 

System 16: This system is adopted from [25]. There are 
two continuous variables x and y and the dynamics are 


X = u 


• 2 

y = yx 


System 17: This system is also adopted from [25]. There 
are two continuous variables x and y and the dynamics are 

X = —a:(0.1 -f (a; -I- yY) 
y = (u-f a;)(0.1 -f {x + yf ) 

, where u G [—2, 2]. The region is P = [—5 5]^. 

System 18: This system is adopted from [10]. There are 
two continuous variables x and y and the dynamics are 

X = y — x^ 
y = u 

, where u G [—1, Ij. The region of interest is P = [—10 10]^. 

System 19: This system is adopted from [33] is a model 
of inverted pendulum on a cart. There are two continuous 
variables 0 (angular position)and w (angular velocity), and 
input u is the applied force to the cart. 

6 = oj 

. 9 r \ h 1 

uj — - sin(0)- —uj -\ -- cos[0)u 

I niR ml 

, where g = 9.8, h = 2, I = 2, m = 0.5 and u G [—30, 30]. 
The region is P = {[6 ojY\9 G [—1 l],z G [—3 3]}. 

System 20: This system is a simple example inspired by 
from [29]. There are three continuous variables x, y, z and 
the dynamics are 

X = —lOx -f lOy + u 
y = 28x — y — xz 
z = xy — 2.6667z 

, where u G [—200, 200]. And region P = [—5 5]^. 

System 21: This system is a Tora system introduced in [6] 
and the equations are adopted from [11]. There are 4 vari¬ 
ables in this system with the following dynamics 

w = X 

X = —w + 0.1 sin(i/) 
y = z 
z = u 


, where u G [—10,10] and region P = [—1, l]"*^. 

System 22: This system is adopted from [14] with 6 
variables x, y, 9, x, y and 9 with the following dynamics 


» , d cos(6») sin(6») 

X = —g sin(t7 j- X -\- ui - U 2 - 

m m 

~ (^ . sin(6*) 

y = g(cos(6») - 1) - y + ui - - -f M 2 - 

m m m 

•• r* 

9=-.. 


cos(0) 


, where m = 11.2, g = 0.28, d = 0.1, r = 0.156, J = 
0.0462 and mi G [—10,10] and M 2 G [—10,10]. 


, where u G [—4,4]. And region P = [—1 1]^. 










